Wanna know a secret? Ask a developer

Secrets are not just login credentials and personal data; they securely hold together the components of the modern software supply chain, from code to the cloud. And because of the leverage they provide they are much sought-after by hackers. However, many breaches that occurred in 2022 show how inadequate the protection of secrets is. Research from automated detection specialist GitGuardian finds that one in 10 code authors exposed a secret in 2022. In just one example, in September 2022 an attacker breached Uber and used hard-coded admin credentials to log into Thycotic, the firm's Privileged Access Management platform. This enabled… [Continue Reading]